--- title: README emoji: ๐Ÿ‘€ colorFrom: gray colorTo: green sdk: static pinned: false --- # IstroSec s.r.o. ๐Ÿ›ก๏ธ **A European Cyber Security Company** [Website](https://istrosec.com/) | [IstroCSIRT](https://istrosec.com/service/csirt-services/) | [Contact](mailto:info@istrosec.com) IstroSec is an advanced cybersecurity firm specializing in digital forensics, incident response (DFIR), offensive security, and proprietary defense R&D. Our team of 50+ world-class experts defends global organizations against complex threats, including nation-state APTs and sophisticated ransomware operators. --- ## ๐Ÿฆ… The GRYPHON Platform **GRYPHON** is our proprietary, in-house Endpoint Detection and Response (EDR) and DFIR platform built for high-stakes incident response and threat hunting: * **Rapid Deployment:** Instantly deployable across thousands of endpoints to immediately establish visibility during active breaches. * **Deep Telemetry & Forensics:** Collects and analyzes memory, volatile data, and forensic artifacts at scale. * **Automated Hunting:** Executes rapid, network-wide sweeps for custom IOCs and advanced TTPs to contain threats in real-time. --- ## ๐Ÿ› ๏ธ Core Capabilities ### ๐Ÿ” Reactive Security (DFIR) * **Incident Response & IstroCSIRT:** 24/7 TI-Accredited response for active breaches, ransomware negotiation, and crisis coordination. * **Digital Forensics:** Deep-dive analysis and evidence acquisition for post-breach investigations. * **Malware Analysis:** Advanced reverse engineering and custom vaccine development. ### โš”๏ธ Offensive Security * **Red & Purple Teaming:** Collaborative and adversary-driven attack simulations targeting critical infrastructure. * **Penetration Testing:** Rigorous vulnerability assessments for web, network, and cloud environments. * **APT Simulations:** Realistic Spearphishing, Whaling, and social engineering campaigns. ### ๐Ÿ›ก๏ธ Defensive Security & R&D * **Managed Defense (MDR):** SOC Level 3+ monitoring and EDR/SIEM optimization. * **Threat Intelligence:** Proactive Dark/Clear web monitoring for data leaks and compromised credentials. * **Vulnerability Research:** Active AI/ML security research (e.g., VYPAI-HaSO project), zero-day discoveries, and CVE publications. --- ## ๐Ÿ† Accreditations & Expertise * **Certifications:** OSCP, CISSP, CISA, CRISC, and extensive GIAC credentials (GCFA, GCFE, GCPN, GXPN, GCIH, GREM). * **Standards:** ISO/IEC 27001:2013, ISO 14001, ISO 9001:2015. * **Membership:** Trusted Introducer (TI) Accredited CSIRT. --- ## ๐Ÿ“ฌ Locations * **EU Headquarters:** myhive Tower 2, Vajnorskรก 100/B, 831 04, Bratislava, Slovakia * **US Office:** 276 5th Avenue, Ste 704-2527, New York, NY 10001 * **Incident Reporting:** [board@istrosec.com](mailto:board@istrosec.com)